Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier: spq/Y/Ar7nD5LFdzg9AFkwniwMcGuqsQZNNrVs6Bz+8=
Subject key identifier: BB:E7:FE:35:A6:63:CF:C1:69:DB:A3:AF:A6:41:21:EA:D1:D6:05:B7
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial: 0196C0B8797F74B8F30B82A4D9E7D7626E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number: 0FEC
Signing time: Sun 11 May 2025 19:00:37 +0000
Manifest this update: Sun 11 May 2025 19:00:37 +0000
Manifest next update: Mon 12 May 2025 19:00:37 +0000
Files and hashes: 1: As6vwkWGZxruqh4uQQnrE0_5Wkc.roa (hash: +uKniDECqLf36Ns+Ibc2IgSroQKNM4uwIuCwreWx2Qo=)
2: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: qWArqNCux8GGJ6I2uo/Yp0MoEuXAEi4sO4GS0uvDzkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:79:7f:74:b8:f3:0b:82:a4:d9:e7:d7:62:6e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Validity
Not Before: May 11 19:00:37 2025 GMT
Not After : May 12 19:00:37 2025 GMT
Subject: CN=bbe7fe35a663cfc169dba3afa64121ead1d605b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:99:71:a1:7f:8f:43:2d:5c:fb:81:05:c1:
1c:f5:83:66:fe:56:e0:33:1a:ee:e8:c1:d7:c6:53:
e6:0b:bd:e9:36:3d:73:33:38:4a:e7:1a:26:ff:f1:
99:69:03:79:60:45:f4:b1:28:7d:e6:7c:b1:0e:66:
f1:89:3d:7c:24:24:fc:b0:c0:b3:5c:4e:e7:91:f8:
e8:1f:bb:16:fa:25:c6:69:ec:64:13:7c:1d:03:a8:
70:7d:8d:8a:c4:d0:0c:50:4c:c6:4a:19:d8:0b:4f:
7a:a0:be:61:36:2b:2d:25:cc:3c:4a:6b:ac:d1:f5:
f6:31:4c:9b:7d:c7:be:3c:c2:bb:9e:d5:54:57:9a:
bf:d5:42:d4:9c:8f:05:0a:ab:ce:e1:4b:75:42:d2:
00:c5:3a:2e:ab:7c:c2:14:dd:85:8a:a0:be:7e:e3:
88:97:1e:70:ba:f9:78:50:7d:08:72:bb:1d:72:d4:
12:1d:dc:2e:4b:9b:b5:63:c4:8d:fc:ce:24:fb:47:
a0:f9:f4:56:e0:45:13:ad:c8:93:95:f6:a6:34:2e:
2a:89:03:ac:89:d8:0f:7e:6b:18:08:31:3c:a6:ce:
0d:47:21:f2:5a:ad:80:48:71:4d:44:bc:3f:cf:82:
64:aa:6f:b8:5a:ed:77:de:94:ef:fe:3c:51:50:a4:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E7:FE:35:A6:63:CF:C1:69:DB:A3:AF:A6:41:21:EA:D1:D6:05:B7
X509v3 Authority Key Identifier:
keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e7:fc:d0:90:d0:62:b5:e7:6d:d0:a0:b6:92:59:df:d5:e7:
4b:86:a4:fe:08:30:5f:29:69:63:e6:3e:a6:d5:9b:0b:76:00:
43:42:e6:f7:6e:19:46:49:98:be:05:02:34:bb:62:2e:e5:db:
57:16:a8:e7:12:1d:b3:b2:96:60:30:10:c9:78:23:b4:ad:74:
c3:62:f9:b1:34:5b:49:3b:a9:18:67:0a:0c:d6:e0:15:17:c5:
2e:93:ff:b9:00:71:b8:6b:ce:1b:71:4e:e4:7b:b2:b9:0e:ce:
23:c2:a5:7f:6d:f5:7a:4f:30:07:a2:ef:cf:50:fb:00:47:06:
29:5d:71:1a:ab:f8:7b:92:d9:8a:78:0c:0c:92:dc:c8:d5:d6:
3f:41:47:74:a6:d3:21:35:32:df:16:93:6f:3c:69:ab:5f:cc:
fa:b5:f1:6f:ad:ce:e8:d5:c6:77:a7:cc:c0:cf:48:1f:13:50:
64:71:54:a7:ac:08:b0:c6:bb:65:de:d3:06:f3:80:6a:68:4c:
f9:dd:7a:73:f6:93:31:f8:79:0b:c6:7d:1b:6a:5a:d2:0c:bf:
50:a1:ac:23:24:9c:e5:63:af:8f:6e:ea:6e:f4:51:3d:a8:ce:
a1:e6:3b:ea:84:7f:f0:ec:63:31:33:a1:b0:67:de:0c:11:3b:
e0:b2:4b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:16:11 2025 by rpki-client